29
CVEs
6
Critical
14
High
0
KEV
0
PoC
0
Unpatched C/H
100.0%
Patch Rate
1.2%
Avg EPSS
Severity Breakdown
CRITICAL
6
HIGH
14
MEDIUM
9
LOW
0
Monthly CVE Trend
Affected Products (30)
Velociraptor
27
Nexpose
18
Metasploit
15
Insight Agent
8
Appspider Pro
6
Insightvm
6
Insightappsec
4
Insightconnect Sed Plugin
3
Python
3
Insightcloudsec
3
OpenSSL
2
Insightconnect Finger Plugin
1
Insight Platform
1
Insightconnect Sqlmap Plugin
1
Insightconnect Tcpdump Plugin
1
Java
1
SSH
1
Insightconnect Ping Plugin
1
Metasploit Pro
1
Insightconnect Markdown Plugin
1
Insightconnect Compression Plugin
1
Insightconnect Rpm Plugin
1
Insightconnect Tr Plugin
1
Open Redirect
1
Insight Collector
1
Insightconnect Awk Plugin
1
PostgreSQL
1
Appspider
1
Komand
1
Ssti
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-64954 | Privilege escalation in Velociraptor's notebook VQL execution path allows analyst-role users to bypass the COLLECT_CLIENT permission check and schedule new client collections, a capability normally restricted to the investigator role. The bypass is achieved by executing a VQL query that resets the authorization provider, collapsing the RBAC boundary between analyst and investigator roles. No public exploit has been identified at time of analysis, though the remediation commit is publicly visible on GitHub. | HIGH | 8.2 | 23.0% | 64 |
|
| CVE-2026-19583 | Privilege escalation in Rapid7 Velociraptor lets any user permitted to schedule client monitoring artifacts run otherwise-restricted artifacts - including Linux.Sys.BashShell - to execute arbitrary commands on managed endpoints. The server enforced the EXECVE permission for scheduling command-execution artifacts through normal collection, but applied no equivalent permission or CLIENT_EVENTS-type check on the client monitoring path, so a low-privileged operator can bypass the gate entirely. No public exploit identified at time of analysis, though the upstream fix (PR #4967) makes the missing check straightforward to reconstruct. | CRITICAL | 9.9 | 0.6% | 50 |
|
| CVE-2026-8592 | Remote OS command injection in Rapid7's InsightConnect AWK Plugin (versions below 1.2.2 on Linux) lets attackers run arbitrary operating-system commands through the process_string action's text or expression parameters, which are unsafely concatenated into a shell command. The CVSS 9.8 rating reflects full confidentiality, integrity, and availability loss with no privileges or user interaction required by the vector. There is no public exploit identified at time of analysis, EPSS is low (0.55%), and CISA SSVC marks exploitation as none, so risk today is potential rather than observed. | CRITICAL | 9.8 | 0.6% | 50 |
|
| CVE-2026-8660 | OS command injection in Rapid7's InsightConnect Ping Plugin (versions before 1.0.4) on Linux lets attackers run arbitrary operating-system commands by injecting shell metacharacters into the host parameter of the plugin's ping action, which is concatenated into a shell command without proper sanitization. Any actor able to influence the host input flowing into this SOAR plugin gains full code execution on the plugin's runtime host. There is no public exploit identified at time of analysis, EPSS is low (0.55%), and CISA's SSVC marks exploitation as 'none' and the flaw as not automatable, so risk is real but not yet observed in the wild. | CRITICAL | 9.8 | 0.6% | 50 |
|
| CVE-2026-8665 | OS command injection in Rapid7's InsightConnect Translate (TR) Plugin on Linux lets remote attackers run arbitrary shell commands by injecting into the 'text' or 'expression' parameters of the TR action, which are concatenated into a shell command without sanitization (CWE-78). All plugin versions before 2.0.3 are affected. There is no public exploit identified at time of analysis and EPSS is low (0.55%), but the flaw yields full system compromise per the vendor's own SSVC 'total' technical-impact rating. | CRITICAL | 9.8 | 0.6% | 50 |
|
| CVE-2026-8666 | OS command injection in Rapid7's InsightConnect Traceroute Plugin (Linux, versions below 1.0.3) lets attackers inject arbitrary shell commands through the traceroute action's host, port, max_ttl, count, or time_out parameters, which are concatenated into a shell command without sufficient validation. Successful exploitation grants full command execution in the plugin container with the same impact on confidentiality, integrity, and availability. This was reported by the vendor (Rapid7) with a fix in 1.0.3; there is no public exploit identified at time of analysis, and EPSS sits at a modest 0.55% (42nd percentile). | CRITICAL | 9.8 | 0.6% | 50 |
|
| CVE-2026-18972 | Privilege escalation to administrator in Rapid7 Velociraptor (all versions before 0.77.2) allows an authenticated low-privileged GUI user to impersonate any other user, including admins, by supplying a crafted 'Grpc-Metadata-USER' header, resulting in full account takeover. The flaw stems from the gRPC/GUI layer trusting a client-supplied identity header instead of the authenticated session. No public exploit has been identified at time of analysis, and it is not listed in CISA KEV, but the fix is trivial to reverse-engineer once the header name is known. | CRITICAL | 9.6 | 0.3% | 48 |
|
| CVE-2026-9155 | OS command injection in the Rapid7 InsightConnect Sed Plugin on Linux lets an authenticated operator inject arbitrary shell commands through the plugin's `expression` parameter, which is passed to the underlying `sed` invocation without sufficient sanitization. Because InsightConnect is a SOAR orchestration platform, a low-privileged workflow author or connected user (PR:L) can achieve full code execution in the plugin's runtime context (C:H/I:H/A:H, CVSS 8.8). There is no public exploit identified at time of analysis and the issue is not on CISA KEV. | HIGH | 8.8 | 0.9% | 45 |
|
| CVE-2026-8659 | OS command injection in Rapid7's InsightConnect SQLmap Plugin (versions before 2.0.1) on Linux lets an authenticated InsightConnect user inject arbitrary operating-system commands through the api_host or api_port fields supplied while configuring the plugin's connection. Because the plugin runs inside the InsightConnect orchestration runtime, a successful injection yields code execution in that automation context (CVSS 8.8, CWE-78). No public exploit identified at time of analysis, and SSVC records exploitation status as none; EPSS is modest at 0.73% (50th percentile). | HIGH | 8.8 | 0.7% | 45 |
|
| CVE-2026-8663 | OS command injection in the Rapid7 InsightConnect RPM Plugin on Linux lets authenticated users run arbitrary operating-system commands by injecting shell metacharacters into the repo, key, or name parameters, which are concatenated into a shell command without sanitization (CWE-78). All versions before 1.0.2 are affected. There is no public exploit identified at time of analysis, and the EPSS probability is low (0.73%, 50th percentile). | HIGH | 8.8 | 0.7% | 45 |
|
| CVE-2026-8664 | OS command injection in Rapid7's InsightConnect Finger Plugin (versions prior to 1.0.3) on Linux lets an authenticated attacker run arbitrary operating-system commands by injecting shell metacharacters into the user or host parameters, which are passed unsanitized into a constructed shell command (CWE-78). Because the plugin executes within the InsightConnect SOAR orchestrator, successful exploitation yields full read/write and availability impact on the host running the plugin. No public exploit is identified at time of analysis, and EPSS estimates only a 0.73% 30-day exploitation probability. | HIGH | 8.8 | 0.7% | 45 |
|
| CVE-2026-8658 | OS command injection in Rapid7's InsightConnect Tcpdump Plugin (versions before 2.0.0) on Linux lets an authenticated attacker run arbitrary operating-system commands by injecting shell metacharacters into the 'options' or 'filter' parameters, which are unsafely concatenated into a tcpdump shell invocation. An attacker holding low-privileged access to a SOAR workflow that uses this plugin can fully compromise the orchestrator host (high confidentiality, integrity, and availability impact). There is no public exploit identified at time of analysis and the issue is not on the CISA KEV list; EPSS is modest at 0.73%. | HIGH | 8.8 | 0.7% | 45 |
|
| CVE-2026-19200 | Privilege escalation in Velociraptor allows any user with the NOTEBOOK_EDIT permission - typically an analyst-level role - to overwrite global artifacts without the elevated permissions normally required for such operations. The `verify()` VQL function, designed only for syntax validation, incorrectly writes submitted artifacts into the shared global repository rather than a temporary local scope, effectively bypassing authorization controls (CWE-862). No public exploit or CISA KEV listing has been identified at time of analysis, but the low privilege bar and network accessibility make this a meaningful internal threat in Velociraptor deployments. | HIGH | 8.9 | 0.2% | 45 |
|
| CVE-2026-18860 | Privilege escalation in Rapid7 Velociraptor's multi-tenant org management allows child org administrators to delete any org in the deployment by exploiting a misplaced permission check. The server incorrectly validates the ORG_ADMIN permission against the caller's own child org rather than the ROOT org, and child org admins can self-grant this permission within their local ACL scope. An attacker with child org admin credentials can permanently delete peer orgs - including all their forensic artifacts, hunt data, and client configurations - well outside their authorized boundary. | HIGH | 8.7 | 0.3% | 44 |
|
| CVE-2026-15371 | Cross-site scripting in Velociraptor's web GUI arises from unsanitized URL scheme handling in URL-typed table columns, enabling a high-privileged attacker to inject javascript: URIs that execute when a second user clicks the crafted link in the console. The scope change (S:C) in the CVSS vector confirms the XSS crosses the application's security boundary into the victim's browser session, exposing session tokens and permitting authenticated actions on behalf of the victim. No public exploit code or CISA KEV listing has been identified at time of analysis, but the C:H/I:H impact scores reflect meaningful credential theft and session hijacking potential within the Velociraptor investigation console. | HIGH | 8.1 | 0.2% | 41 |
|